Privacy policy

PRIVACY POLICY

Internet shops www.edog.lt

Rules for processing personal data and information on the use of cookies

UAB "Sled dogs Baltic" ensures that personal data is processed in a legal, fair and transparent manner, is collected only for the purposes defined and clearly defined in this policy, and is not further processed in a manner incompatible with those purposes.

By applying organizational and technical measures, UAB "Sled dogs Baltic" ensures adequate security of personal data, including protection against unauthorized or illegal data processing and against accidental loss, destruction, or damage.

BASIC CONCEPTS

1.1. Privacy policy - these personal data processing rules and information on the use of cookies, which are posted on the website www.edog.lt.

1.2. Website - a website located at www.edog.lt, where a customer of UAB "Sled dogs Baltic" can place an order, give consent to processing personal data for the purpose of direct marketing.

1.3. Data controller - a legal or natural person who, alone or together with others, determines the goals and means of processing personal data. In this Privacy Policy, the data controller is UAB "Sled dogs Baltic", legal entity code: 302604155, address: Algirdo 37, Vilnius LT-03217 contact details: e-mail Mr. info@sleddog.lt, tel. No. 8 640 12815.

1.4. Data subject - a customer or website visitor whose personal data is processed by the Data Controller for the purposes of electronic commerce, direct marketing, request administration, loyalty program administration.

1.5. Data processor - a natural or legal person who helps the Data Controller, in accordance with the powers granted by him, to implement the set goals.

1.6. Personal data - data of a natural person that is managed by the Data Controller and by which the customer or website visitor can be identified, including, but not limited to: name, surname, e-mail address, telephone number, etc.

1.7. Data processing - any action performed with personal data: collection, recording, accumulation, storage, change (addition or correction), provision, use, destruction or other action or set of actions.

1.8. Direct marketing - activities aimed at offering goods or services to individuals by mail, telephone or other direct means, offering occasional discounts and/or asking for their opinion on the offered goods or services.

1.9. E-commerce - buying and selling goods or services online.

1.10. Consent is a freely expressed action of the Data Subject, by which he agrees to the processing of personal data.

1.11. The supervisory authority is the State Personal Data Protection Inspectorate.

GENERAL PROVISIONS

2.1. The policy provides for the basic provisions for the collection, storage and processing of personal data.

2.2. The data subject is considered familiar with this Privacy Policy and having read it, when he expresses his Consent to the processing of his Personal Data.

2.3. This Privacy Policy can be consulted and printed at any time on the www.edog.ltinternet website.

PERSONAL DATA COLLECTION, STORAGE AND USE PROCEDURE

3.1. The data subject agrees that for the purpose of electronic commerce, the Data Controller will process the following personal data related to them:

3.1.1. name, surname,

3.1.2. Phone number,

3.1.3. email address,

3.1.4. IP address,

3.1.5. product delivery address,

3.1.6. post office address for delivery of goods,

3.1.7. email store account username and password,

3.1.8. product/service payment data (bank account number, payment method, etc.),

3.1.9. purchase history (purchased goods and/or services, price, etc.),

3.2. For this purpose, the personal data obtained are stored for 5 (five) calendar years from the last time the customer logs in to his e-mail. store user account dates.

3.3. The data subject is informed that the given consent to process personal data related to him for the purpose of electronic commerce can be revoked at any time by submitting a request to the Data Controller by e-mail. to the email address info@sleddog.lt from the same email. e-mail address that was specified during e-mail registration store user account or by deleting your e-mail store user account and personal data.

3.4. The data subject is informed that for the implementation of this purpose data processors are used - companies providing courier services:.

3.5. The data subject agrees that for the purpose of administration of the request, when the request is submitted by e-mail by mail, the Data Controller will process the following personal data related to him:

3.5.1. name, surname,

3.5.2. email address,

3.5.3. comment/request.

3.6. The data controller confirms that personal data processed for this purpose are not provided.

3.7. For this purpose, personal data is stored for 2 (two) calendar years from the date of data submission.

3.8. The data subject is informed that the given consent to process personal data related to him for the purpose of administration of the request can be revoked at any time by submitting a request to the Data Controller by e-mail. e-mail address: info@sleddog.lt from the same e-mail the mailing address from which the request was made.

3.9. The data subject agrees that for the purpose of direct marketing, the Data Controller will process the following personal data related to him:

3.9.1. Phone number

3.9.2. e-mail address.

3.10. Personal data obtained for the purpose of direct marketing are stored for 2 (two) calendar years from the date of data submission.

3.11. The data subject is informed that the given consent to the processing of personal data related to him for the purpose of direct marketing can be revoked at any time by logging into his e-mail. store user account by clicking on the link in each e-mail sent. in a letter or by submitting a request to the Data Controller by e-mail to the e-mail address info@sleddog.lt from the same e-mail e-mail address provided when subscribing to the newsletter or registering your e-mail store user account.

3.13. The Data Controller confirms that personal data is collected only directly from the Data Subject and is not collected from other sources.

3.14. The Data Controller undertakes not to disclose processed Personal Data to third parties, except in the following cases:

3.14.1. if there is consent of the Data Subject to the disclosure of personal data,

3.14.2. when executing an order or providing other services - to Data Processors providing goods delivery or other services ordered by the Buyer,

3.14.3. to law enforcement authorities in accordance with the requirements of legal acts,

3.14.4. if it is necessary to prevent or investigate criminal acts.

IMPLEMENTATION OF THE RIGHTS OF THE DATA SUBJECT

4.1. The data subject grants the Data Controller the right to collect, manage, process and store personal data related to him to the extent and for the purposes provided for in this Privacy Policy.

4.2. The consent to collect, process, and store personal data related to it can be revoked by the Data Subject at any time, and personal data processed for the purpose of direct marketing can be revoked without any additional justification. Upon receiving such a request from the Data Subject, the Data Controller immediately stops the processing of personal data and destroys the personal data related to it. The data controller has the right not to delete personal data from the server, if he has a legitimate reason to keep them, especially when it is necessary to ensure the security and defense of the state, public order, crime prevention, investigation, detection or prosecution, to protect the important economic or financial interests of the state, the rights of other persons and protection of freedoms.

4.3. The data subject, who has properly identified himself and provided the Data Controller with his name, surname, e-mail store account password, e-mail e-mail address, has the right to access his personal data by submitting a written request to the Data Controller in one of the following ways: 1) by mail or by delivering directly to the address: Algirdo 37 Vilnius LT-03217 2) to the e-mail address: info@sleddog.lt from the e-mail address, which was submitted to the Data Controller during e-mail registration. store user account, submitting a request, ordering a newsletter.

4.4. If another person wants to get acquainted with the personal data of the Data subject, he must submit a power of attorney certified by a notary, and the data is provided to the lawyer only after submitting the representation agreement and indicating the purpose of data use.

4.5. Upon receipt of the Data Subject's request for access to processed personal data, the Data Controller shall provide a response within 30 (thirty) calendar days from the date of receipt of the request. The response indicates whether personal data is processed with the Data Subject and, if so, what and to whom it was provided during the last 1 (one) calendar year. The answer is provided free of charge.

4.6. If after getting acquainted with his personal data, the Data Subject determines that the personal data has been collected or obtained from illegal sources, or that the personal data is not being processed for the purposes for which consent was given, the Data Subject has the right to contact the Data Controller by e-mail requesting the suspension of such Personal data data processing actions and/or delete personal data related to it. The Data Controller verifies the Data Subject's request and, upon determining that the request is justified, immediately, but no later than within 5 days. d., satisfies the Data Subject's request and informs about the actions taken in writing.

4.7. In cases where the Data Subject, having familiarized himself with his personal data, determines that they are inaccurate or incomplete, after properly identifying himself and applying in writing, he requests to correct and/or supplement the personal data related to him. After determining that the request is justified, the data controller corrects or supplements the processed personal data immediately, but no later than within 5 days. d., and informs in writing about the actions taken.

4.8. The Data Subject has the right to demand that the Data Controller "forget" him, that is, delete all data related to him, if those data are not needed for the purpose for which they were collected and processed, or if the Data Subject withdraws the given consent, or if the data is processed in violation of legal requirements . The data controller satisfies such a request without reasonable delay, but no later than within 5 days. d. and informs the Data Subject about the actions taken.

4.9. The data subject, believing that his legitimate interests were violated during the processing of his personal data, has the right to apply to the Supervisory Authority.

PERSONAL DATA PROTECTION RISK FACTORS AND THEIR SOLUTION

5.1. In order to ensure adequate protection of Personal Data, the Data Controller implements the following organizational and technical personal data protection measures:

5.1.1. Organizational

5.1.1.1. The work order of the data controller is organized in such a way as to ensure the safe handling and (if applicable) transfer of computer data and/or documents and their archives.

5.1.1.2. Access to the personal data of the Data subject is granted only to those Employees who need them to perform their work functions and only to those who have signed confidentiality agreements and are familiar with other internal procedures in the scope of personal data processing.

5.1.2. Technical

5.1.2.1. Data processors (service providers) appointed by the Data Controller act only on the authority of the Data Controller.

5.1.2.2. Personal data is protected against loss, unauthorized use and changes. Internet connection is encrypted.

5.1.2.3. Protection of computer equipment against harmful software (e.g. installation, updating of antivirus programs) is ensured, and the internal computer network is protected by a firewall.

USE OF COOKIES

6.1. On the www.edog.lt website, cookies are used for statistical purposes, evaluating website traffic and the popularity of individual content. Such data processing does not allow direct or indirect identification of the website visitor.

6.2. As a website visitor, you can delete cookies from your computer or block them in your internet browser, but some of the website's functionality may not work or work incorrectly in this case.

FINAL PROVISIONS

7.1. This Privacy Policy is reviewed once every 2 (two) years and updated if necessary.

7.2. This Privacy Policy is effective from 2018. May 25 and is published publicly on the website.